Malicious PDF — malware analysis report

Static analysis result for SHA-256 aa6260832ef2ee5b…

MALICIOUS

PDF

27.6 KB Created: 2019-05-02 06:49:48 +01:00 Authoring application: mPDF 5.7
MD5: eaf03f9006c275e1ccba8ae85f50e198 SHA-1: 2ae5ebecdce78fd818bfa1efcb1a1be781c1651c SHA-256: aa6260832ef2ee5b1e1110656feb664deb4624811e8bda284133a2270b50b08d
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links pointing to external PDF files hosted on the domain loaminoo.linkpc.net. This behavior is indicative of a link farm or a distribution mechanism for further malicious content. The ML classifier also flagged this PDF with high confidence. No scripts were extracted, and the document body was heavily obfuscated, preventing a more detailed analysis of the specific lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9903

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/7096094097099099/Le-Rapport-de-Brodeck-de-Philippe-Claudel-Fiche-de-lecture-Comprendre-la-litt-rature-avec-lePetitLitt-raire-fr-by-C-cile-Perrel.pdf
    • http://loaminoo.linkpc.net/7093098095095090/Le-Liseur-de-Bernhard-Schlink-Fiche-de-lecture-Comprendre-la-litt-rature-avec-lePetitLitt-raire-fr-by-M-lanie-Kuta.pdf
    • http://loaminoo.linkpc.net/5097093091093094/Ravage-de-Ren-Barjavel-Fiche-de-lecture-Comprendre-la-litt-rature-avec-lePetitLitt-raire-fr-by-Claire-Cornillon.pdf
    • http://loaminoo.linkpc.net/5092094090096097/Stupeur-et-Tremblements-d-Am-lie-Nothomb-Fiche-de-lecture-Comprendre-la-litt-rature-avec-lePetitLitt-raire-fr-by-Nausicaa-Dewez.pdf
    • http://loaminoo.linkpc.net/5094093096093092/Au-bonheur-des-ogres-de-Daniel-Pennac-Fiche-de-lecture-Comprendre-la-litt-rature-avec-lePetitLitt-raire-fr-by-Fabienne-Gheysens.pdf
    • http://loaminoo.linkpc.net/6094098094094093/Th-r-se-Desqueyroux-de-Fran-ois-Mauriac-Fiche-de-lecture-Comprendre-la-litt-rature-avec-lePetitLitt-raire-fr-by-Kathy-Jusseret.pdf
    • http://loaminoo.linkpc.net/8091094098096091/L-Aval-e-des-aval-s-de-R-jean-Ducharme-Fiche-de-lecture-Comprendre-la-litt-rature-avec-lePetitLitt-raire-fr-by-Juline-Hombourger.pdf
    • http://loaminoo.linkpc.net/5093090093093099/35-kilos-d-espoir-d-Anna-Gavalda-Fiche-de-lecture-Comprendre-la-litt-rature-avec-lePetitLitt-raire-fr-by-Elena-Pinaud.pdf
    • http://loaminoo.linkpc.net/6092093093099097/Le-Mythe-de-Sisyphe-d-Albert-Camus-Fiche-de-lecture-Comprendre-la-litt-rature-avec-lePetitLitt-raire-fr-by-Martine-Petrini-Poli.pdf
    • http://loaminoo.linkpc.net/7099096098093097/Inconnu-cette-adresse-de-Kathrine-Kressmann-Taylor-Fiche-de-lecture-Comprendre-la-litt-rature-avec-lePetitLitt-raire-fr-by-Sandrine-Guih-neuf.pdf
    • http://loaminoo.linkpc.net/1090091090092090/Brodeck-by-Philippe-Claudel.pdf
    • http://loaminoo.linkpc.net/2090095090098099/Brodeck-s-Report-by-Philippe-Claudel.pdf
    • http://loaminoo.linkpc.net/7096094097099098/Brodeck-s-Report-by-Philippe-Claudel-Book-Analysis-Detailed-Summary-Analysis-And-Reading-Guide-by-Bright-Summaries.pdf
    • http://loaminoo.linkpc.net/2094095096093097/The-Investigation-by-Philippe-Claudel.pdf
    • http://loaminoo.linkpc.net/7097094090094094/L-attrape-c-urs-Fiche-de-lecture-by-J-D-Salinger.pdf
    • http://loaminoo.linkpc.net/8090095095097094/Cannibale-de-Didier-Daeninckx-Analyse-de-l-oeuvre-Comprendre-la-litt-rature-avec-lePetitLitt-raire-fr-by-Elena-Pinaud.pdf
    • http://loaminoo.linkpc.net/6092095098099091/Fiche-de-lecture-Gargantua-de-Rabelais-by-Les-ditions-de-l-39-Ebook-malin.pdf
    • http://loaminoo.linkpc.net/7098090093090097/Le-Soleil-des-Scorta-de-Laurent-Gaud-Analyse-de-l-oeuvre-Comprendre-la-litt-rature-avec-lePetitLitt-raire-fr-by-Audrey-Millot.pdf
    • http://loaminoo.linkpc.net/5096093096094091/Fiche-de-lecture-Bonjour-tristesse-de-Fran-oise-Sagan-by-Les-ditions-de-l-39-Ebook-malin.pdf
    • http://loaminoo.linkpc.net/7095099098092093/Fiche-de-lecture-lectre-de-Jean-Giraudoux-compl-te-by-Les-ditions-de-l-39-Ebook-malin.pdf
    • http://loaminoo.linkpc.net/5097093091093094/Ravage-de-Ren-Barjavel-Fiche-de-lecture-Comprendre-la-litt-rature-avec-lePetitLitt-raire-fr-by-Claire-Corni